# 4.21.19

Created: 2026-06-04 13:40:10 +0000 UTC

Image Digest: `sha256:1417c1970881b2a3b8d4baf2bfed9afc8be016ed82a86a2245fe8c683a82ab33`


## Changes from 4.21.18

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| GatewayAPIWithoutOLM <br/> (0 tests)|  |  |  |  |  |   |


### Rebuilt images without code change

* [baremetal-installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:cd6914edf791c08c02368210fb46c22577ca25902f6f407082ce823e315b222b`
* [cli](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:a1007fb96e5991606e054cb2a45cb6296ec0ec1898ec89a3e5d3ccaacb1be33d`
* [cli-artifacts](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:59eac72519b86759591da6697edc35c28d6298bd8c2342e1c1eaf769914af483`
* [deployer](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:0e140b0b7d6f6f2694d92910bb2e80ac56eff11dfd45dd9928bd0094da7a681c`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:86231cc8acbdb2ccf6be986d998965e9f9d028b2023738b78863a9be202957ba`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:fc4787f69db199e7642c5cf5188cffac3762a479b65a2e234ae07db89a295b98`
* [hyperkube](https://github.com/openshift/kubernetes) git [eab2218b](https://github.com/openshift/kubernetes/commit/eab2218b931d0c20740d6259df59f242abf32ef7) `sha256:95ecc9b2e6efbdea01353946364ad49d20a23959893c3756e4c55ec2766bb52c`
* [installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:986342bb24d12257f9634226011ade58544b6d46c93a1b02469d64d4e8ce3661`
* [ironic](https://github.com/openshift/ironic-image) git [6e93d7a0](https://github.com/openshift/ironic-image/commit/6e93d7a042c96f1db6307549d348da8f6f89b06a) `sha256:9b5af789b750ccab96d964d77de718ba2730605daee93f917f5fdb097d09af7f`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:379c674108feac980a6f2c38b69796a5442bf5d92ac524f8aa6fe96617973d36`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e9019e5f](https://github.com/openshift/machine-os-images/commit/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd) `sha256:93928c0cea8d8a41996cf07a9346a96d9ee529b0f6585d5e2cc9e68d4b862ad7`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [462c7889](https://github.com/openshift/monitoring-plugin/commit/462c78890ffb636e05d91d41ca718bb3c81da4cf) `sha256:a973776feb3261a622dbeb9f15241b13a95b183a4e650ef2268be470d5ad349f`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:2761831a5f31cee9cb2aa94cb66940d9342b5ea971cc3da6823038c735c9eb8f`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:71c9a49f4e933d3b070c5c94944df9c43f6088559d6fe5b614dc685fdfa3d720`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [268037d7](https://github.com/openshift/networking-console-plugin/commit/268037d76fd97d29f39eae2f25f0a2b2910cb30e) `sha256:15431ce7bcdca6fc22478bd918b0b18f0c3ad0a776f35e4e3147930976f6f810`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [d586f851](https://github.com/openshift/ovn-kubernetes/commit/d586f851c25d8f7cd04840cda79a0a6a98ea8485) `sha256:cca0b3dee61807f87bf4474fcd08615500b2f08f358468af95b981923611815e`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:168b617776225d55be48ac094d2a6cf59f94316bb40b166674b2d827b5ffef5c`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:0127f4e1801e714f775b1333306d22a51497fe5c913c1768d0a23f28ec889ed4`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:c9b2e5df4ddad39020bc73fadf822184502d8de6752ea66923a377864872faa9`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:2edb94b594cd07a6a7292b48ca9d50189ea8f46fc853b36526fda6666b5a5f2a`
* [tests](https://github.com/openshift/origin) git [c2da98a5](https://github.com/openshift/origin/commit/c2da98a5a8f0e23886ac536fbeb81140e798fb71) `sha256:6c818b8025c2a5370eb18b4ec1627f10b9f58e5f108432e552be1850a0d69c67`
* [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:f04d483a5457fffcbe045e168990ee48946f91c1915d04e408f5be19eab62429`


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/0b264c7f6c227a2ea4d1392879bce555d087dac0)

* prefill staticip on ove below the sea (#3769) [#3769](https://github.com/openshift-assisted/assisted-installer-ui/pull/3769)
* Custom manifests are broken in local Assisted UI (#3770) [#3770](https://github.com/openshift-assisted/assisted-installer-ui/pull/3770)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/0df91b31e146522a5548f699c13214073ac53045...0b264c7f6c227a2ea4d1392879bce555d087dac0)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/20bb13fab3865444b7a4ae454dd234391c4d7e49)

* [OCPBUGS-85572](https://issues.redhat.com/browse/OCPBUGS-85572): Add init container for Manila node daemonset [#554](https://github.com/openshift/csi-operator/pull/554)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5f294954dc029e0ed120243c3188af81df89d9e4...20bb13fab3865444b7a4ae454dd234391c4d7e49)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/154ae10f442b7d40f14492c5973cd3459791d00f)

* [OCPBUGS-81982](https://issues.redhat.com/browse/OCPBUGS-81982): Bump go-jose/go-jose/v4@v4.1.4 [#1027](https://github.com/openshift/cloud-credential-operator/pull/1027)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/693d9f3485b21cf128fa379eabd6787737fa56ad...154ae10f442b7d40f14492c5973cd3459791d00f)


### [cluster-config-api](https://github.com/openshift/api/tree/1d79f30d4668393dc34e9b423ec6904645503c58)

* [OCPBUGS-85149](https://issues.redhat.com/browse/OCPBUGS-85149): Backport GatewayAPIWithoutOLM feature gate as disabled [#2864](https://github.com/openshift/api/pull/2864)
* [Full changelog](https://github.com/openshift/api/compare/b66d75611553df4827e899e5eaa4d6321ed9f44c...1d79f30d4668393dc34e9b423ec6904645503c58)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)

* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): gate dual-replica setup and keep retrying [#1620](https://github.com/openshift/cluster-etcd-operator/pull/1620)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/10012737e9b23528357c130184ef4d890ae8ea33...898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)

* [OCPBUGS-74373](https://issues.redhat.com/browse/OCPBUGS-74373): Remove restriction of unmanaged x-k8s.io [#1446](https://github.com/openshift/cluster-ingress-operator/pull/1446)
* [OCPBUGS-86027](https://issues.redhat.com/browse/OCPBUGS-86027): Fix logging for unmanaged controllers [#1448](https://github.com/openshift/cluster-ingress-operator/pull/1448)
* [OCPBUGS-80759](https://issues.redhat.com/browse/OCPBUGS-80759): Authorization bypass due to improper HTTP/2 path validation [#1441](https://github.com/openshift/cluster-ingress-operator/pull/1441)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6c70966cd2011f861843e85efb8bf08c3a938fe1...3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)

* [OCPBUGS-86809](https://issues.redhat.com/browse/OCPBUGS-86809): Requeue PerformanceStatus update when status write fails [#1524](https://github.com/openshift/cluster-node-tuning-operator/pull/1524)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58...d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)


### [console](https://github.com/openshift/console/tree/402882702875b34bb4872c051808a35a67880346)

* [OCPBUGS-85674](https://issues.redhat.com/browse/OCPBUGS-85674): Prevent binary secret data corruption when editing [#16448](https://github.com/openshift/console/pull/16448)
* [OCPBUGS-79459](https://issues.redhat.com/browse/OCPBUGS-79459): CVE-2026-29063 Immutable.js: Improperly Controlled Mod… [#16503](https://github.com/openshift/console/pull/16503)
* [OCPBUGS-86427](https://issues.redhat.com/browse/OCPBUGS-86427): Fix Shipwright detail pages crashing with React error #310 [#16487](https://github.com/openshift/console/pull/16487)
* [OCPBUGS-86314](https://issues.redhat.com/browse/OCPBUGS-86314): Show empty state instead of 403 error for users without projects [#16478](https://github.com/openshift/console/pull/16478)
* [Full changelog](https://github.com/openshift/console/compare/28c6e026e4cc49aa470f755ae01a1acb4cd2935d...402882702875b34bb4872c051808a35a67880346)


### [console-operator](https://github.com/openshift/console-operator/tree/aee1a79b48a86e0feaef8ac72b5ec3c124429859)

* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1096](https://github.com/openshift/console-operator/pull/1096)
* [Full changelog](https://github.com/openshift/console-operator/compare/4393afe88810c9db76fc6da1821787449e666ef4...aee1a79b48a86e0feaef8ac72b5ec3c124429859)


### [hypershift](https://github.com/openshift/hypershift/tree/d345a6af0fb9c22d2058ac98994afbcb41e24f6f)

* [OCPBUGS-86416](https://issues.redhat.com/browse/OCPBUGS-86416): add Konflux pipeline definitions for CPO 4.21 [#8607](https://github.com/openshift/hypershift/pull/8607)
* [OCPBUGS-86477](https://issues.redhat.com/browse/OCPBUGS-86477): [release-4.21] add CP pull-secret watches for in-place propagation [#8583](https://github.com/openshift/hypershift/pull/8583)
* [Full changelog](https://github.com/openshift/hypershift/compare/b5bc1c2f89e9cdbd5d0d1b1374674f5bcd45b76b...d345a6af0fb9c22d2058ac98994afbcb41e24f6f)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0efd2f822814f9965ef6dc14b68f24eebcaca40d)

* Fix for OCPBUGS-81988: CVE-2026-34986 bump github.com/go-jose/go-jose [#143](https://github.com/openshift/kube-state-metrics/pull/143)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/ce6f3742ed123b671acd6de4d3605c3a7f644cf8...0efd2f822814f9965ef6dc14b68f24eebcaca40d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)

* [OCPBUGS-86576](https://issues.redhat.com/browse/OCPBUGS-86576): Verify extension packages are installed [#6090](https://github.com/openshift/machine-config-operator/pull/6090)
* [OCPBUGS-84481](https://issues.redhat.com/browse/OCPBUGS-84481): MCS fallback to latest v3 [#5883](https://github.com/openshift/machine-config-operator/pull/5883)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5aabf7ccb1f54f0c889a87b1670827f9b2d23461...340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f9812811fdc23a9baa72f075afe566caddfe2280)

* Fix for OCPBUGS-81971: CVE-2026-34986 github.com/go-jose/go-jose/v4 [#1426](https://github.com/openshift/oc-mirror/pull/1426)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/994deebef2836ca75003dd15372f7110d2448fa6...f9812811fdc23a9baa72f075afe566caddfe2280)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/40d1c0adfedeca36498a5d93d69aee96831c756d)

* [OCPBUGS-80854](https://issues.redhat.com/browse/OCPBUGS-80854): bump google.golang.org/grpc to v1.79.3 to fix CVE-2026-33186 [#98](https://github.com/openshift/cloud-provider-powervs/pull/98)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/969a04e9dcb4cdde10e3038a9e28d2e27548918d...40d1c0adfedeca36498a5d93d69aee96831c756d)